Skip to content
OpenAdvisories

Archive

30 July 2019

Vulnerabilities first published on this day (UTC), newest first.

← June 2019 2019 / July /30 August 2019 →
  1. 160
  2. 268
  3. 397
  4. 448
  5. 561
  6. 619
  7. 74
  8. 833
  9. 937
  10. 1090
  11. 1184
  12. 1211
  13. 132
  14. 146
  15. 1585
  16. 1636
  17. 1768
  18. 1860
  19. 1950
  20. 20 
  21. 2113
  22. 2236
  23. 23244
  24. 2422
  25. 2569
  26. 2636
  27. 2720
  28. 2820
  29. 2987
  30. 3095
  31. 3162
All Critical High Medium Low Exploited only Public exploit

95 results · Feed

  • Unscored —
    CVE-2019-14390

    cPanel before 82.0.2 has stored XSS in the WHM Modify Account interface (SEC-512).

  • Unscored —
    CVE-2019-14389

    cPanel before 82.0.2 allows local users to discover the MySQL root password (SEC-510).

  • Unscored —
    CVE-2019-14388

    cPanel before 82.0.2 allows unauthenticated file creation because Exim log parsing is mishandled (SEC-507).

  • Unscored —
    CVE-2019-14387

    cPanel before 82.0.2 has Self XSS in the cPanel and webmail master templates (SEC-506).

  • Unscored —
    CVE-2019-14381

    libopenmpt before 0.4.3 allows a crash due to a NULL pointer dereference when doing a portamento from an OPL instrument…

    libopenmpt Debian
  • Unscored —
    CVE-2019-14386

    cPanel before 82.0.2 has stored XSS in the WHM Tomcat Manager interface (SEC-504).

  • Unscored —
    CVE-2015-9290

    In FreeType before 2.6.1, a buffer over-read occurs in type1/t1parse.c on function T1_Get_Private_Dict where there is n…

    freetype Debian
  • Unscored —
    CVE-2017-18380

    edx-platform before 2017-08-03 allows attackers to trigger password-reset e-mail messages in which the reset link has a…

  • Unscored —
    CVE-2019-14327

    A CSRF vulnerability in Settings form in the Custom Simple Rss plugin 2.0.6 for WordPress allows attackers to change th…

  • Unscored —
    CVE-2019-13635 EPSS 44%

    The WP Fastest Cache plugin through 0.8.9.5 for WordPress allows wpFastestCache.php and inc/cache.php Directory Travers…

  • Unscored —
    CVE-2019-14444

    apply_relocations in readelf.c in GNU Binutils 2.32 contains an integer overflow that allows attackers to trigger a wri…

    binutils binutils Debian Ubuntu
  • Unscored —
    CVE-2019-14443

    An issue was discovered in Libav 12.3. Division by zero in range_decode_culshift in libavcodec/apedec.c allows remote a…

    libav Ubuntu
  • Unscored —
    CVE-2019-14442

    In mpc8_read_header in libavformat/mpc8.c in Libav 12.3, an input file can result in an avio_seek infinite loop and han…

    libav Ubuntu
  • Unscored —
    CVE-2019-14441

    An issue was discovered in Libav 12.3. An access violation allows remote attackers to cause a denial of service (applic…

  • High 7.5
    CVE-2019-14439 Public exploit EPSS 11%

    Deserialization of untrusted data in FasterXML jackson-databind

    A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2. This occurs when Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint and the service has the logback jar in …

    com.fasterxml.jackson.core:jackson-databind jackson-databind jackson-databind Debian Ubuntu Maven